{"id":24810,"date":"2026-08-03T09:43:40","date_gmt":"2026-08-03T09:43:40","guid":{"rendered":"https:\/\/bitcoinwisdom.com\/?p=24810"},"modified":"2026-08-03T09:43:40","modified_gmt":"2026-08-03T09:43:40","slug":"nereus-finance-suffers-flash-loan-attack","status":"publish","type":"post","link":"https:\/\/bitcoinwisdom.com\/nl\/nereus-finance-suffers-flash-loan-attack\/","title":{"rendered":"Nereus Finance op lawinebasis lijdt aan aanval op flitslening: post-mortem"},"content":{"rendered":"\n<ul class=\"wp-block-list\"><li><strong>Nereus Finance has recently witnessed an attack that resulted in a loss of $371,000 worth of user funds in the form of USD Coin (USDC) using a smart contract exploit.<\/strong><\/li><li><strong>CertiK first detected the hack and its impact on liquidity pools on Nereus in connection with automated market maker Curve Finance and decentralized exchange Trader Joe.<\/strong><\/li><\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<p>Avalanche-based lending platform Nereus Finance has recently witnessed an attack that resulted in a loss of $371,000 worth of user funds in the form of USD Coin (USDC) using a smart contract exploit.&nbsp;<\/p>\n\n\n\n<p>On September 6, the renowned blockchain cybersecurity firm CertiK first detected the hack and its impact on liquidity pools on Nereus in connection with automated market maker Curve Finance and decentralized exchange Trader Joe.<\/p>\n\n\n\n<p>CertiK also believes that the underlying protocols are also impacted by the crafty attack. However, according to Curve Finance, only Nereus is impacted. <\/p>\n\n\n\n<p>It stated on Twitter on September 7:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>&#8220;Maybe you meant &#8216;assets impacted,&#8217; not &#8216;protocols impacted&#8217;. Only [Nereus Finance] and its assets seem impacted.&#8221;<\/p><\/blockquote>\n\n\n\n<p>Notably, Nereus Finance recently <a href=\"https:\/\/medium.com\/nereus-protocol\/post-mortem-flash-loan-exploit-in-single-nxusd-market-343fa32f0c6\" rel=\"nofollow noopener\" target=\"_blank\">released<\/a> a detailed post-mortem of the attack, which clearly explains that the hacker deployed a custom smart contract that used a $51 million flash loan from Aave to intentionally manipulate the AVAX\/USDC Trader Joe LP (JLP) pool price.<\/p>\n\n\n\n<p>Later on the night of September 6, Nereus used the community discord to alert the community about an assault. It sought the advice of security specialists, created a mitigation plan, and alerted law enforcement to support efforts in the hours that followed. According to the report, the lending platform has minimized the attack by liquidating and pausing the exploited JLP market.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">We&#39;ve published a post-mortem on the NXUSD incident from yesterday. <a href=\"https:\/\/t.co\/ADhu6PagP2\" rel=\"nofollow\">https:\/\/t.co\/ADhu6PagP2<\/a> <br>Thanks <a href=\"https:\/\/twitter.com\/peckshield?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\" target=\"_blank\">@peckshield<\/a> <a href=\"https:\/\/twitter.com\/CertiK?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\" target=\"_blank\">@CertiK<\/a><\/p>&mdash; Nereus Finance (@nereusfinance) <a href=\"https:\/\/twitter.com\/nereusfinance\/status\/1567574661311102976?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\" target=\"_blank\">September 7, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>Nereus Finance further confirmed that the attacker minted $998,000 worth of Nereus&#8217; native utility token NXUSD against $508,000 worth of collateral. They went on to swap this fund into different cryptocurrencies via multiple liquidity pools, and once the flash loan was returned, they managed to run away with a net theft of $371,000. The attack created $500,000 worth of NXUSD &#8220;bad debt&#8221; in the NXUSD protocol, which was reportedly paid off by the team&#8217;s treasury.\u00a0<\/p>\n\n\n\n<p>The Nereus team is currently working to find the attacker and funds and has decided to offer a 20% White Hat reward for the return of the assets.<\/p>\n\n\n\n<p>Moreover, since Nereus claims to be changing its &#8220;audit and security policies to ensure these types of events do not occur in the future,&#8221; it is also certain that the same exploit won&#8217;t occur again. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>&#8220;Going forward, TWAP calculations will be implemented along with other upgrades to pricing feeds for collateral assets that do not have Chainlink oracles,&#8221;<\/p><cite>the lending protocol states.<\/cite><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Nereus Finance has recently witnessed an attack that resulted in a loss of $371,000 worth of user funds in the form of USD Coin (USDC) using a smart contract exploit. CertiK first detected the hack and its impact on liquidity pools on Nereus in connection with automated market maker Curve Finance and decentralized exchange Trader [&hellip;]<\/p>\n","protected":false},"author":21,"featured_media":24815,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_editorskit_title_hidden":false,"_editorskit_reading_time":1,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_uag_custom_page_level_css":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[188,12],"tags":[718,1645],"class_list":["post-24810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi-news","category-news","tag-avalanche","tag-nereus-finance"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance.jpg",1200,675,false],"thumbnail":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance-500x330.jpg",500,330,true],"medium":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance-300x169.jpg",300,169,true],"medium_large":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance-768x432.jpg",640,360,true],"large":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance-1024x576.jpg",640,360,true],"1536x1536":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance.jpg",1200,675,false],"2048x2048":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance.jpg",1200,675,false],"trp-custom-language-flag":["https:\/\/bitcoinwisdom.com\/wp-content\/uploads\/2022\/09\/Nereus-Finance-18x10.jpg",18,10,true]},"uagb_author_info":{"display_name":"Parth Dubey","author_link":"https:\/\/bitcoinwisdom.com\/nl\/author\/parth\/"},"uagb_comment_info":0,"uagb_excerpt":"Nereus Finance has recently witnessed an attack that resulted in a loss of $371,000 worth of user funds in the form of USD Coin (USDC) using a smart contract exploit. CertiK first detected the hack and its impact on liquidity pools on Nereus in connection with automated market maker Curve Finance and decentralized exchange Trader&hellip;","_links":{"self":[{"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/posts\/24810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/comments?post=24810"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/posts\/24810\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/media\/24815"}],"wp:attachment":[{"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/media?parent=24810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/categories?post=24810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinwisdom.com\/nl\/wp-json\/wp\/v2\/tags?post=24810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}